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DETAILED ACTION 

1. Claims 30-38 are pending. 

2. Response filed 09/24/2007 has been received and fully 
considered. 

Claim Rejections - 35 USC § 103 

3. Claims 30-38 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Boroughs et al. (US 6834350) in view of 
Riordan et al . (Target Naming and Service Apoptosis). 

As per claims 30 and 33, Boroughs et al, discloses a 
security system comprising: an activation token identifying 
system characteristics and specifying a threat and at least one 
preset activation measure, wherein a system characteristic is 
one of the group of a hardware system, a service, a 
configuration of a service, a service execution platform, and a 
service session (see column 2 line 62 through column 3 line 34); 
a first system configured to at least review security and 
vulnerability information form information publishers and to 
provide the activation token based on filtered security and 
vulnerability information (see column 2 line 59 through column 3 
line 10) ; and a second system configured to determine whether 
the activation token is relevant by checking if actual 
characteristics at the second system correspond to the system 
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characteristics identified by the activation token, the second 
system further configured to transform the activation token into 
at least one activation measure if the activation token is 
considered relevant by the second system the activation measure 
configured to modify services executing at the second system 
(see column 3 lines 35-67 and column 4 lines 1-5) wherein the 
first system is further configured to automatically filter the 
security and vulnerability information relevant to the system 
characteristics identified 'by the activation token (see column 2 
line 59 through column 3 line 10 and Figure 17) . 

Boroughs et al. fail to explicitly disclose including a 
threat level within the activation token. 

However, Riordan et al. teaches including a trust level (as 
well as system characteristics) with an activation token (see 
page 220) . 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to include trust levels 
with the activation tokens of Boroughs et al. 

Motivation to do so would have been to distinguish between 
the severities of threats (see page 220) . 

As per claim 31, the modified Boroughs et al. and Riordan 
et al. system discloses cryptographic means configured to verify 
at the second system that the first system is a trusted service 
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(see Boroughs et al. column 3 lines 55-67 and Riordan et al. 
pages' 220 and 223) . 

As per claim 32, the modified Boroughs et al. and Riordan 
et al. system discloses reporting means configured to report to 
a system administrator of the second system any activation 
measure taken by the second system (see Riordan et al. page 223 
and Boroughs et al. column 2 lines 59-67). 

As per claim 34, the modified Boroughs et al. and Riordan 
et al . system discloses a list of trusted service providers from 
whom activation tokens are accepted by the second system (see 
Riordan et al . page 222). 

As per claims 35-38, the modified Boroughs et al. and 
Riordan et al . system discloses a preset activation measure is 
one of shutting down a service affected by the specified threat 
level, reconfiguration of the service, installing a patch for 
the service and altering a system administrator (see Riordan et 
al . page 223 ) . 

Response to Arguments 

4. Applicants arguments filed 09/24/2007 have been fully 
considered but they are not persuasive. Applicant argues that 
Riordan is not available as prior art and the rejections amount 
to conclusory statements. 
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With respect to Applicant's argument that the Riordan 
reference is not available as prior art, as evidenced by the 
printout from barnesandnoble.com the book which contains the 
Riordan was published in January 2000, which is more than a year 
from the filing date of the present application. Therefore, it 
qualifies as a 35 (JSC 102(b) prior art and can be properly used 
in a 35 USC 103(a) rejection. 

With respect to Applicant's argument that the rejections 
amount to conclusory statements, the above rejections contain 
citations within the main prior art reference as to where the 
claimed limitations are disclosed. Next, 'a statement of what 
the main prior art reference fails to disclose. Followed by a 
statement of what the secondary prior art teaches and where it 
teaches it with an obviousness statement and motivation. All of 
these statements fulfill the requirements of 35 USC 103(a) and 
are therefore not conclusory statements. 

Conclusion 

5. THIS ACTION IS MADE FINAL. Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS 
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of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1..136(a) will be calculated 
from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Michael 
Pyzocha whose telephone number is (571) 272-3875. The examiner 
can normally be reached on 7:00am - 4:30pm- first Fridays of the 
bi-week off. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Emmanuel Moise can be 
reached on (571) 272-3865. The fax phone number for the 
organization where this application or proceeding is assigned is 
571-273-8300. 
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Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 
(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . If you would 
like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 
(IN USA OR CANADA) or 571-272-1000. 




MJP 
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